# IBM adds governed identity and credential controls for enterprise AI agents

Digest AI · Agents & Tools · published 2026-10-27T04:18:10Z

Canonical: https://digestai.news/story/ibm-adds-governed-identity-and-credential-controls-for-enterprise-ai-a

## Summary

IBM announced a suite of identity, credential and governance features for enterprise AI agents at TechXchange 2026 in Atlanta. The rollout includes the generally available IBM Agent Identity and HashiCorp Vault 2.2, which registers agents in a central inventory, captures ownership and risk data, and issues OAuth‑based short‑lived, task‑scoped tokens that can be traced back to a person or approval state.

The new capabilities aim to close gaps identified by Gartner, which warned that by 2028 most Fortune 500 firms will run over 150,000 agents while only a minority feel their governance is adequate. IBM’s solution pairs its Verify platform with HashiCorp Vault to provide just‑in‑time, least‑privilege credentials, real‑time revocation and post‑quantum encryption. Additional previews such as Secure Hub, Vault Arc and Boundary 1.1 extend visibility and control across distributed environments. Watsonx Orchestrate’s tech preview adds discovery, containment and evaluation tools for third‑party agents and models on platforms like Amazon Bedrock, Microsoft Foundry and Google Gemini, offering compliance metrics and a kill‑switch for sandboxed agents.

Executives from IBM, NVIDIA and client organizations highlighted how these controls can enable secure, auditable AI operations while meeting emerging regulatory expectations.

## Key points

- IBM announced Agent Identity and HashiCorp Vault 2.2 for governing enterprise AI agents, with centralized inventory and short‑lived tokens.
- Vault 2.2 adds vTPM support, post‑quantum encryption, and automated credential renewal for non‑human identities.
- Watsonx Orchestrate tech preview can discover, contain, and evaluate third‑party agents across platforms like Bedrock, Foundry and Gemini.

## Why it matters

Providing verified identities and fine‑grained credential controls helps enterprises prevent unauthorized AI actions and meet emerging governance regulations.

## Sources

1. [IBM Brings Governed Identity and Credential Controls to AI Agents](https://unite.ai/ibm-brings-governed-identity-and-credential-controls-to-ai-agents) (Unite.AI, 2026-10-27)

Part of the developing story: [AI Agent Identity and Access Control Evolution](https://digestai.news/thread/ibm-adds-governed-identity-and-credential-controls-for-enterprise-ai-agents) (2 stories)

## Cite

Digest AI, "IBM adds governed identity and credential controls for enterprise AI agents", 27 October 2026, https://digestai.news/story/ibm-adds-governed-identity-and-credential-controls-for-enterprise-ai-a

---

Written by Digest AI's editorial model from the linked sources; the sources are the record. Headlines, digests and key points are written by Digest AI and may be quoted with a link to the story page. Linked articles belong to their publishers. Terms: https://digestai.news/terms#reuse
JSON: https://digestai.news/story/ibm-adds-governed-identity-and-credential-controls-for-enterprise-ai-a.json